[Secure-testing-commits] r23745 - data/CVE

Moritz Muehlenhoff jmm at alioth.debian.org
Fri Sep 20 05:55:10 UTC 2013


Author: jmm
Date: 2013-09-20 05:55:10 +0000 (Fri, 20 Sep 2013)
New Revision: 23745

Modified:
   data/CVE/list
Log:
one libvirt issue unimportant
linux kernel issue confirmed and added to kernel-sec tracker


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-09-19 21:56:12 UTC (rev 23744)
+++ data/CVE/list	2013-09-20 05:55:10 UTC (rev 23745)
@@ -3463,7 +3463,6 @@
 	RESERVED
 	- linux-2.6 <removed>
 	- linux <unfixed>
-	TODO: check
 CVE-2013-4344
 	RESERVED
 CVE-2013-4343
@@ -3560,10 +3559,11 @@
 	RESERVED
 CVE-2013-4311 [insecure calling of polkit via libgobject API]
 	RESERVED
-	- libvirt <unfixed>
+	- libvirt <unfixed> (unimportant)	
+	NOTE: polkit support not activated in Debian build, will be fixed in point update
 CVE-2013-4310
 	RESERVED
-CVE-2013-4309 [REJECTED]
+CVE-2013-4309
 	RESERVED
 CVE-2013-4308 (Cross-site scripting (XSS) vulnerability in ...)
 	NOT-FOR-US: Mediawiki LiquidThreads extension




More information about the Secure-testing-commits mailing list